CVE-2026-90101

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notify_event() is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This API break results in undefined behavior and may result in a crash. Pass the hardware monitoring device as parameter instead to fix the problem.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/001ff5d8e68aacd91768b824b930dd7e68db6688
https://git.kernel.org/stable/c/622d698df4239fef3e0eb51fe59f4198f957f28a
https://git.kernel.org/stable/c/b17907ef665bc76a495a8f909f74656d3f32b7a2
https://git.kernel.org/stable/c/e3cad8389a72b8a309b5689c1683310126b0d7da

Configurations

No configuration.

History

17 Sep 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-17 17:17

Updated : 2026-09-17 17:17

NVD link : CVE-2026-90101

Mitre link : CVE-2026-90101

CVE.ORG link : CVE-2026-90101

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-90101", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a19b4801457b0806c0153dc344f548c6f8615896", "lessThan": "e3cad8389a72b8a309b5689c1683310126b0d7da", "versionType": "git"}, {"status": "affected", "version": "a19b4801457b0806c0153dc344f548c6f8615896", "lessThan": "001ff5d8e68aacd91768b824b930dd7e68db6688", "versionType": "git"}, {"status": "affected", "version": "a19b4801457b0806c0153dc344f548c6f8615896", "lessThan": "b17907ef665bc76a495a8f909f74656d3f32b7a2", "versionType": "git"}, {"status": "affected", "version": "a19b4801457b0806c0153dc344f548c6f8615896", "lessThan": "622d698df4239fef3e0eb51fe59f4198f957f28a", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/broadcom/bnxt/bnxt_hwmon.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"status": "unaffected", "version": "0", "lessThan": "6.7", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.110", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.52", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.6", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/broadcom/bnxt/bnxt_hwmon.c"], "defaultStatus": "affected"}]}], "published": "2026-09-17T17:17:01.793", "references": [{"url": "https://git.kernel.org/stable/c/001ff5d8e68aacd91768b824b930dd7e68db6688", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/622d698df4239fef3e0eb51fe59f4198f957f28a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b17907ef665bc76a495a8f909f74656d3f32b7a2", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e3cad8389a72b8a309b5689c1683310126b0d7da", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device. The bnxt driver calls it with the platform device as\nfirst parameter instead. This API break results in undefined behavior and\nmay result in a crash.\n\nPass the hardware monitoring device as parameter instead to fix the\nproblem."}], "lastModified": "2026-09-17T17:17:01.793", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}